h1920.com
Issued by R3
About this certificate
This digital certificate with serial number 04:c3:7f:6e:e2:14:2d:d9:6f:57:dd:cd:91:9d:bc:1d:ef:e8 was issued on by Let's Encrypt.
With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=h1920.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:c3:7f:6e:e2:14:2d:d9:6f:57:dd:cd:91:9d:bc:1d:ef:e8Serial Number (int): 414973592970166433472462716700853073211368
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 0b:55:3c:57:d2:45:dd:0c:25:d3:40:7e:ce:a7:50:1c:55:bc:ed:44
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 42:de:6e:87:c0:5e:d3:d6:e3:de:c6:28:8e:1d:0e:e7:47:00:f4:bb
Fingerprint (sha256): 2b:37:76:fe:ce:98:19:ed:ad:ca:8d:86:b5:53:a9:e3:fa:f3:6a:9a:24:1f:6e:6b:a9:71:b7:42:60:73:1d:5b
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate h1920.com
13
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for h1920.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
50statestrail.com
adflegal.adult
arkprefabs.com
beyob.com.immucanna.com
bonitabeachcondos.com.cheapsolarflorida.com
cdiipropertiesllc.com
food-notmedicine.com.arbitrageur.mx
h1920.com
haagservices.com
healthyhomepeople.com
houstonconstructioncompanies.com
odontoguia.com
redbeardbryan.com.besamebecerril.com
adflegal.adult
arkprefabs.com
beyob.com.immucanna.com
bonitabeachcondos.com.cheapsolarflorida.com
cdiipropertiesllc.com
food-notmedicine.com.arbitrageur.mx
h1920.com
haagservices.com
healthyhomepeople.com
houstonconstructioncompanies.com
odontoguia.com
redbeardbryan.com.besamebecerril.com
Other certificates including the domain name h1920.com
(limited to 100 certificates)
olympia.ac
bible.bible
bungalohomes.org
34755625397.ca
travel-ready.life
sidney.work
flanaganinstitute.ie
h1920.com
h1920.com
transfermarket.de
spiritualhemp.com.h1920.com
flanaganinstitute.ie
healthchoices.org
transfermarket.de
rent.limited
transfermarket.de
olympia.ac
shipwrecks.site
checkout.vc
theotgap.bible
theotgap.bible
westgarden.life
transfermarket.de
h1920.com
h1920.com
homeschoolingaroundtheworld.org
trailerskirts.ca
olympia.ac
h1920.com
trailerskirts.ca
transfermarket.de
flanaganinstitute.ie
marsexpress.ca
originalekaufen.nl.recoverymasters.com.clearword.bible
travel-ready.life
transfermarket.de
ziplink.org
umidigitalfaith.org
instituteforbiblereading.bible
sidney.work
geta.bible
olympia.ac
series.bible
breakthrough.bible
theotgap.bible
bible.bible
bungalohomes.org
34755625397.ca
travel-ready.life
sidney.work
flanaganinstitute.ie
h1920.com
h1920.com
transfermarket.de
spiritualhemp.com.h1920.com
flanaganinstitute.ie
healthchoices.org
transfermarket.de
rent.limited
transfermarket.de
olympia.ac
shipwrecks.site
checkout.vc
theotgap.bible
theotgap.bible
westgarden.life
transfermarket.de
h1920.com
h1920.com
homeschoolingaroundtheworld.org
trailerskirts.ca
olympia.ac
h1920.com
trailerskirts.ca
transfermarket.de
flanaganinstitute.ie
marsexpress.ca
originalekaufen.nl.recoverymasters.com.clearword.bible
travel-ready.life
transfermarket.de
ziplink.org
umidigitalfaith.org
instituteforbiblereading.bible
sidney.work
geta.bible
olympia.ac
series.bible
breakthrough.bible
theotgap.bible
Certificate
The complete raw certificate details for h1920.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgISBMN/buIULdlvV93NkZ28He/oMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMjIyMDIxMTRaFw0yNDAzMjEyMDIxMTNaMBQxEjAQBgNVBAMT CWgxOTIwLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJfwV0B6 VQd24bGhB0v95gbT5LXWiD4aWMOfUY4q/6nPbSd+Rf6sLAI3f/qKkFEiAzfPPUMR KzySb65otqMS9omvJZQM3Bho5zZ6z6QsvDUHdQFdp2FPpuTLZmCNjJHMfxOcxyvo Kpo+CJ94Qt1QCUHRJg/UK4vFJ9skVjS7ka5WuRdxRytBOOqAGI90cNdgbZQEqQqr 3P7xuJ7a+uKVOcofQBNQvKzB3ziCJjsQfNH4AQCbjeS8RaomzIN8Od/p064iK9+C MCoRFvRslSjKrRlxs+ngscc+FbxDNtuyZ/Jz7wn+Y4V/1SJff1GYSMuu1B/ZfOKC ACWoygA9wTqnrpUCAwEAAaOCA0kwggNFMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU C1U8V9JF3Qwl00B+zqdQHFW87UQwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggFO BgNVHREEggFFMIIBQYIRNTBzdGF0ZXN0cmFpbC5jb22CDmFkZmxlZ2FsLmFkdWx0 gg5hcmtwcmVmYWJzLmNvbYIXYmV5b2IuY29tLmltbXVjYW5uYS5jb22CK2Jvbml0 YWJlYWNoY29uZG9zLmNvbS5jaGVhcHNvbGFyZmxvcmlkYS5jb22CFWNkaWlwcm9w ZXJ0aWVzbGxjLmNvbYIjZm9vZC1ub3RtZWRpY2luZS5jb20uYXJiaXRyYWdldXIu bXiCCWgxOTIwLmNvbYIQaGFhZ3NlcnZpY2VzLmNvbYIVaGVhbHRoeWhvbWVwZW9w bGUuY29tgiBob3VzdG9uY29uc3RydWN0aW9uY29tcGFuaWVzLmNvbYIOb2RvbnRv Z3VpYS5jb22CJHJlZGJlYXJkYnJ5YW4uY29tLmJlc2FtZWJlY2VycmlsLmNvbTAT BgNVHSAEDDAKMAgGBmeBDAECATCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AEiw 42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjJNnX/YAAAQDAEgwRgIh AJgYFm1VkvbrUl2LWSnMkrI+OwBMAXJSmwrqAqjf8TN6AiEAi7ZQi7+aWFmEKFFK E2cxJ5NoYZry45kIYerYgbzToZ4AdwCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3 iviabfUX2AAAAYyTZ2AJAAAEAwBIMEYCIQD/Ir1ncqxOxPwrxElnKzeJZ9ru64nG RmV61mopMA5G7wIhAJGvAFSEqScpsBIGpVmx4RnsxOUPJ/SEsBIfoGnH5RJCMA0G CSqGSIb3DQEBCwUAA4IBAQBsXFtsRjf8AmBxcx6t8SN1k7nQbHiVDlvbqShnZxXu S/B1ouad9HUtD84HVYzC4SflTSdu4ERHv/fbkntZdRU6t6MSbbO36wBMMoNU9lAv Eji4Do+VGS3Ni9TOh4FDE9D0HieqV6iIoUKNCMnksp+nL5rUhPGH4JF0vtVP/Vqn QEad/IgziEiGqrPGqSTNqTCYhqGJOM/RXARQC5X2mvLYF3rOUWo/E0dw3t2uJ4pP MafMPUrJGmxwLXpKSNSp86tpNULY03Z4ZPwPBZx4g1XsMJa9OZVDv4H+4K2Kn1NG d3ktmrFysp9kzzn6BfYfh/+L05UO/AhapZaaQO/o0T43 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/BXQHpVB3bhsaEHS/3m BtPktdaIPhpYw59Rjir/qc9tJ35F/qwsAjd/+oqQUSIDN889QxErPJJvrmi2oxL2 ia8llAzcGGjnNnrPpCy8NQd1AV2nYU+m5MtmYI2Mkcx/E5zHK+gqmj4In3hC3VAJ QdEmD9Qri8Un2yRWNLuRrla5F3FHK0E46oAYj3Rw12BtlASpCqvc/vG4ntr64pU5 yh9AE1C8rMHfOIImOxB80fgBAJuN5LxFqibMg3w53+nTriIr34IwKhEW9GyVKMqt GXGz6eCxxz4VvEM227Jn8nPvCf5jhX/VIl9/UZhIy67UH9l84oIAJajKAD3BOqeu lQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 414973592970166433472462716700853073211368 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 20:21:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 20:21:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'h1920.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19180500529136089301368634154677373059189287873534210876140049731194959866393014396593611213822149156694392075811791597860130157688194832540164144665753362153837506887006730416615446307837198068198973299276357420309417510121561352728844231835682948084368614266096234847585815287681516363147273468783924236141545317528364848040102767321930900537119817841393709946947813527204176806504951306905028183545554779403774737290550711445054254917878927471774401158777562169912938045117049460092922664304833477268823186743477395574436302844849004717707409207415790434396235790964846285520969346333995459958569121353546907233941 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0b553c57d245dd0c25d3407ecea7501c55bced44 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (325 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50statestrail.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adflegal.adult' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkprefabs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyob.com.immucanna.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonitabeachcondos.com.cheapsolarflorida.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdiipropertiesllc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food-notmedicine.com.arbitrageur.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h1920.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haagservices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomepeople.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonconstructioncompanies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odontoguia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redbeardbryan.com.besamebecerril.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c93675ff600000403004830460221009818166d5592f6eb525d8b5929cc92b23e3b004c0172529b0aea02a8dff1337a0221008bb6508bbf9a58598428514a136731279368619af2e3990861ead881bcd3a19e007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c936760090000040300483046022100ff22bd6772ac4ec4fc2bc449672b378967daeeeb89c646657ad66a29300e46ef02210091af005484a92729b01206a559b1e119ecc4e50f27f484b0121fa069c7e51242 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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